The Post and Courier reports that the financial information of approximately 7,000 customers of the Medical University of South Carolina (MUSC) was stolen when credit card processing company Blackhawk Consulting Group was hacked last month (h/t PHIprivacy.net).
The stolen data included names, billing addresses, e-mail addresses, credit/debit card numbers, expiration dates, and CCV2 numbers. MUSC believes that no health information, birthdates or Social Security numbers were accessed.
Medical University Hospital executive director Dr. Pat Cawley told the Post and Courier that the majority of those impacted are South Carolina residents who paid MUSC with a credit card over the phone or online between June 30 and August 21, 2013. MUSC was notified of the breach on August 22, 2013.
All those affected are being contacted by mail and via a pre-recorded phone message providing them with information on the theft, and MUSC is offering one free year of access to a credit protection, monitoring and restoration service from Experian.
More information on the breach is available on MUSC's Web site. Patients with questions are advised to contact MUSC at (800) 868-5051.